CVE-2026-11316: High severity vulnerability

Published Nov 10, 2026

Updated

A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs (version(s): 0.14.5). A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

Event History

Nov 10, 2026

CVE Published

via MITRE·03:29 PM

Data Sourced

via MITRE·03:29 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Applications that use dr_libs version 0.14.5 and process WAV files containing cue-related metadata are exposed when they handle attacker-provided files.

What does an attacker need to exploit this issue?

The attacker needs to provide a specially crafted WAV file. The CVSS vector indicates no privileges are required, but user interaction is required for the malicious file to be processed.

What is the potential impact if exploitation succeeds?

The vulnerability is rated high severity with high confidentiality, integrity, and availability impact in the supplied CVSS vector. Successful processing of the crafted file can trigger an out-of-bounds write.

CVE-2026-11316: High severity vulnerability

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?